[dns-operations] signing a zone with NSEC3 records.

Edward Lewis Ed.Lewis at neustar.biz
Thu Sep 10 18:35:14 UTC 2009


At 11:12 -0700 9/10/09, Ravi Kondamuru wrote:

>I understand that on an authoritative server ZoneA can be signed using RSASHA1
>algorithm and ZoneB using RSASHA1-NSEC3-SHA1, but it is not possible to have
>ZoneC signed using both RSASHA1 and RSASHA1-NSEC3-SHA1. ZoneC has to choose
>one of the two.

You can't do NSEC and NSEC3 in the same zone (because a server has to 
know how to handle a negative response situation and that is keyed on 
the presence/abscence of an NSEC3PARAM RRset at the apex).

But you can mix algorithms.  Note that the only difference between 
RSASHA1 and RSASHA1-NSEC3 is the algorithm number.

See the example below:


$ cat tld..signed
; File written on Thu Sep 10 14:32:59 2009
; dnssec_signzone version 9.6.1
tld.			518400	IN SOA	a.gtld.tld. hostmaster.tld. (
					1000000    ; serial
					900        ; refresh (15 minutes)
					900        ; retry (15 minutes)
					604800     ; expire (1 week)
					86400      ; minimum (1 day)
					)
			518400	RRSIG	SOA 5 1 518400 20091010173259 (
					20090910173259 48162 tld.
					fh35qvcxhAWFyJtZ80Y2fLVvTsnKNTYvtmso
					WxhnyQN36hEYtdsmRu3J5RxFAhHGkNdyc1hN
					FeL6qLWqU8BSgUjZ1g0X9jz/fypUV99dOYlq
					UvWzLVqdsVeAMcWXMcH7z4Cqhe9Jo5qQR5Yg
					VgUiK5ln9Ud59vc7Ap9xL1KlA1o= )
			518400	RRSIG	SOA 7 1 518400 20091010173259 (
					20090910173259 55238 tld.
					GtGMOrtyC7k1Jyc1dHJhhXRvv3NpjU5ugIki
					maRaua/+L3Rt9GzLJZUhoYLus6k1gSmECorW
					XB6JL65Qw5Hg1bLSQgHgcUaZVdlAs1oNOTPs
					Ourx2Hrfuvr9pFuiXmGqKCE1QjO0zk7w3WF7
					QdOPTmQGVlgQCVu9ZgAx5OVpHuc= )
			518400	NS	a.gtld.tld.
			518400	RRSIG	NS 5 1 518400 20091010173259 (
					20090910173259 48162 tld.
					ciwi1WzgCMY2nFtL9U8IlSLuPpsdY0FpQoEI
					Wn6YyyV3MMBl4j6egSaBmY+SU3U+pznEIN/k
					oca3y12e6V2DhhRn86TF9VpM8s6yYy56/0ee
					JgGVkY+IeN4tge9DkzF/MLSU0zpGKehQ+Dxa
					DCbnANmgIRWRxJ5/XUqg484BOWw= )
			518400	RRSIG	NS 7 1 518400 20091010173259 (
					20090910173259 55238 tld.
					OHnoZEiREaVkx5MpVGGyXkEY6XVKk0mE6u4L
					rxy62LcZ0ftnliF8Egcqhh1RQ3PgK+B/BYO5
					ahWPhxeHYrjASTdNwFx6T5OaOsPOj1jc6FQl
					V8C9COLxxEy0pQJ9UetAeQN3de93IaEY0ypK
					ja3Hw2EuPZ2IKkPpxyvnY1rChDs= )
			86400	NSEC	a.gtld.tld. NS SOA RRSIG NSEC DNSKEY
			86400	RRSIG	NSEC 5 1 86400 20091010173259 (
					20090910173259 48162 tld.
					VTmcj+236AX9LEBue6UU+7PdKTBFLwaRd8aY
					PBP9NUZV64NR0XhCwm0N6jGbQ1DviiNUlhs6
					fDXKNEGTMBnuh9u2fJkIObw8EZWL3aOORxP3
					qUWL/17pY7yVzx+3ZinfPH8esQlHCvdmOUeQ
					vPZAAGaDJ/BNuomochdtG543oSE= )
			86400	RRSIG	NSEC 7 1 86400 20091010173259 (
					20090910173259 55238 tld.
					kfi8Kjvbtbtx9abMogxa6eUAuegbZ5uLF17M
					9n/VK53tF00u+0Vle1rNykrFX/h5RHgEnXe+
					HZOxb6p2zv9LBvqsOGjFSLAa5aKOXps9lnph
					Rd7R0xApIJS1aw/Y1ddQQmepBR9uOfiGb2x5
					VGonEBDnIUUzQX/nv5RN66nJtc8= )
			518400	DNSKEY	256 3 5 (
					BEAAAAO3njuWLL8PY7fdvDBHovnMl8EcuKik
					2aza6L8nY+n/gAFCtdNSqXxVsadSkHNsPS6K
					lDD+ZHhXirxL8SmIS3V/2fSljizpOuJNwYiV
					FDcrTaIoaZLFiCoZkFj0BjB6lQVimdJ+2gGH
					zeWTrSVkrVlSRFCWJk8c3CiFXbwQG5/aBw==
					) ; key id = 48162
			518400	DNSKEY	256 3 7 (
					AwEAAfmMbaj/5Azq3CQuI50q39Dbs60HD70a
					1kgtt8LlloWksK6GJbLR6fLSGyvqixesMIdw
					4Wr7REdkkJ73TtqEAAZi12+gNTwi7IxigI2x
					N9NeYufcNJ8RcVyEk217Y+hxI/yxm4I9jtCO
					r86uRGuj8bv+6Tka6lC6Uz9OE2Gh4ZpN
					) ; key id = 55238
			518400	DNSKEY	257 3 5 (
					BEAAAAOz+tAF3EEj0lVu2q7/N3Hdn+Yziv7T
					42BGEi2hWohJ9IHOHoHnKRvp2+VzphrFl/t0
					6IUtLxbSK23e4O2zG1NJ6jhRAM1JOKnC5N2S
					kOT0AGuH575HSfm5RJdPapcdVpJnl4snCwbY
					07Ye9CogyFEKHlKagagsqdW1GL4gMcrxG9V9
					E5E0g4eNhiLCAZ81suQWVuGnaphGF3MhzX5T
					UGdY5H82ZWOyY7XN7hCDtB/DXasRATJurDJD
					VAEi7zn7yZdTCpTl1ndrcSwUii4ZliiGIaQG
					GWmj5WiZk1Wbpaf1pWgkrcyB7Jftdjkted2u
					tJGwTzNxPM7cpzcYkEptk2v5
					) ; key id = 15178
			518400	DNSKEY	257 3 7 (
					AwEAAdgPOvdRGgmJxIyZc3XEcLKXFFgRFFtD
					IvBqJOVkj6jGKmelWypWgqvcn3YD5nqCxhe5
					1wvgxPd1bjYvSDiI61Kvd6vc21eR3Z641mMM
					jGEv8NyJv53nlrXPIUrPGATlh6wJNOGZ/WVJ
					hhIRrxNBHazKMqXWaRw+lG4GvEtz4h48+k3u
					QfDr+gk1Z4m7Jf4mp3XRXZYA50Fm5iGxybjb
					0ecigAlLbgdtAnoXhEOUNY/ZQsYKhFA//z1y
					wvhvr3/ujXULkkP5uDbSIHqObqjfMRu6Y/Aa
					CyY/pr80sbsMF/tabd5xnR5/Du32XJMpM9Tw
					NWv+aOTc2cGjNUIiyxcc3NE=
					) ; key id = 25044
			518400	RRSIG	DNSKEY 5 1 518400 20091010173259 (
					20090910173259 15178 tld.
					a9OjS6kmFc1pSYLTMi1j5xbBG+3SgN/WJ25R
					K7NidX0CMhyMtNHeA5rqyI1E6pTasTqeePOj
					jsEW6H8YuZ2OgJmulpZzIDXAGJlY0qVM01zd
					QSE4mzk20WXyiOykZhORB7OnPupNwmrWCZmv
					JWOPb/Eht5UVc9cghMepr+CQ8DI2qrlCtfJ7
					Up5Pa1RS5b2UTC0fKncXZwnRZXI/qGuDN1Sw
					cmlX5PlRx5D0hywGEJnK9MbgiR3Ds0zfqsM/
					d+DApbarBNHIyR9f0Wj6cBun6yd8lpzAzCll
					kqLquzmGidqqzITpWXnFZ51Ibt2RoFx0c/7Y
					N3vXlbCxqbYRNt7ACQ== )
			518400	RRSIG	DNSKEY 5 1 518400 20091010173259 (
					20090910173259 48162 tld.
					KT7h9cexgtvAXWAnZsOmNIpta/ch1D+O1Y2V
					ghBrJoZ7p9czxxYDuA9ice5W/LAq3w0W4PKf
					fbgTYQMZdizLfsbk0ums/ddymAO+jnjT+QuF
					X23sf0P3a/DazSnMLWgvliadc0YECW8P30E7
					9R+6VkRlyrXpa5T0cJKaG6BMZSE= )
			518400	RRSIG	DNSKEY 7 1 518400 20091010173259 (
					20090910173259 25044 tld.
					PhbUW1d/o4j4C9BgkG52sMsALsQBvVEPAWow
					D4v8eq8ggtq3owtwT0jkSx0MXXec+KCQ8yfm
					5zHx3VHKuFThJlJGqAPk90OFO0ylGF7fYY9f
					E0zP+7RbvjBksYfoi7axaxpW8lEfv8McZbNC
					bSdlRDuG3lwh9R2DBceImmnFHlGoiWzpuMzH
					kSKxNXQ/P4jfAViKagNEaza0I6HH+852a/gy
					IWNW5HK+QhqYjnXuxvYASku83NUNKedhUR9H
					HLKfyT6i+ROUF1eFuGdDOLYa9AQ5duxWy3M6
					Z9DnbcYvKvYiGgLEAdaLQpzxeMV9PkcvFd+b
					FFoKAEAUMs+btF/H9Q== )
			518400	RRSIG	DNSKEY 7 1 518400 20091010173259 (
					20090910173259 55238 tld.
					GLYtiHmXlGDDAxtLKRmMCD4K6FT/Tw8vDciv
					7LX78mQsU7OjSIjR0PhZYRlu7DgZWUu72dNp
					chymfoRfOHOApajwLXs9FqV5s5gKJnXSZ1nc
					AZ9TJZERQgP27rhrPfouVEaLVWM21AYLB9No
					/oJD25RwJi3jBwrSTNFrjD3Eh8E= )
ns0.n0.tld.		518400	IN A	127.0.0.1
ns1.n0.tld.		518400	IN A	127.0.0.1
ns0.n1.tld.		518400	IN A	127.0.0.1
ns1.n1.tld.		518400	IN A	127.0.0.1
a.gtld.tld.		518400	IN A	127.0.0.1
			518400	RRSIG	A 5 3 518400 20091010173259 (
					20090910173259 48162 tld.
					SZ6j3Ldw3IDZUTG9bESIfA+h7czdBsNz1ssm
					FZvJG3y6L2GBQxuZz2mC56UXtdoClXbRp5sS
					1rgcnSVYwRMD8gmCP/AcNv79URi3Vn6Y1CaI
					MhPS7EmVkzXhpaVNMyWx/1dMISr9b1u+/l7j
					cgCrcTatWPCAlOwAeldSIkUI/48= )
			518400	RRSIG	A 7 3 518400 20091010173259 (
					20090910173259 55238 tld.
					TTCcl5k76cMRElWIFEExzqLJIYBN6UbvUnFQ
					Q+eWojU2uP3kQV2SOyYX7lBa3h8Jt71z9DWK
					TctNoOfVIjYc/ZtNr4lTkIDJXnSGjrKu5hVV
					mPqxyCvYrOmq39LAU36MTsikciYylbQ4zNIg
					GUoG7yAeOodXIKsWQG+yBXhYRbI= )
			86400	NSEC	n0.tld. A RRSIG NSEC
			86400	RRSIG	NSEC 5 3 86400 20091010173259 (
					20090910173259 48162 tld.
					mQtM3WYDY06Wk/9FDCYhsKONNzbL+IVtXNwb
					0IuSTTvXjj53mS1RAADXAFO09Jy1xd3sZLxS
					ATj6kHkF0/5AzdDAv1gMT9rtMNLZFJ0kgaWm
					3eFRZsb7KsqcmSs2tMH7sc9Hoyq8PRuZwNi+
					YUrDwXXfp9uGsbkxpZDENzEXZ90= )
			86400	RRSIG	NSEC 7 3 86400 20091010173259 (
					20090910173259 55238 tld.
					FwDBgrnzDhU36qRpt+xm3gtk3Wa1BdsLpGrJ
					pxyO+wG8uONaxSZTEClxqzE3g/2PjF9Czh6g
					G826D5YV55SSarPv2R2xFCzaBeNpkxLLwbCl
					VNal62vlATpt66WZOwd6188guQxGgaDqD9CI
					AIQpfRdq/ObWsrOMavwrVeeWHts= )
ns0.n2.tld.		518400	IN A	127.0.0.1
ns1.n2.tld.		518400	IN A	127.0.0.1
n0.tld.			518400	IN NS	ns0.n0.tld.
			518400	IN NS	ns1.n0.tld.
			86400	NSEC	n1.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					ZN3i5gz7WFdRkRMfifXCfJ3H3G119EyqsqPc
					ohwQD36feCDbB+cD+6f/RE+FU6FGOzfqhp31
					6iWOyumPOBq3Y7qd31fYCrf0X57tocj+6StR
					j722wUc6OSutrAgv3TElQ2pZ6VaVCRYob7Nv
					6iodhOBY37iiidt8bB1Cqlgskzw= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					JoR1S9Ugc8FYqxsKHSkslfWE6Di14Zz68p8W
					j5Au+Qf2Eueex9mDJE3AJa8sgewgAshsjVk/
					j5a3N/Cv+Fh0BFkW6P7A0JKGp8KTsaIHdND5
					kp95lZGOt8cWOE6oc3cDe18hJg/MIL0o1I5D
					Nj5Fv+myYzvq85uJD+Te20csYG8= )
ns0.n3.tld.		518400	IN A	127.0.0.1
ns1.n3.tld.		518400	IN A	127.0.0.1
n1.tld.			518400	IN NS	ns0.n1.tld.
			518400	IN NS	ns1.n1.tld.
			86400	NSEC	n2.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					NH3RkSff6CVh5azLbyQ5lMKoc6PTf77oPG94
					0M9NzMS238ZWlI8Y+By6yauam46luTGpVEhK
					noY+sF18iPbMBUQCjB39iId/BVhw5XzXxmAD
					jYVkbOSU1iOtIHW3vSMVFOle2i/xrV1EnEUu
					U18254dt3PKePntcgGOwS5jKh2U= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					KDnPQTVoyLakxjlEOQKQsjgq2PwiFZsd9x/N
					V2CE8lRL0aUuluzrlHc0d4RZ0K9xMSSCRvDT
					+oUW5THdTPRkc5IMhMdzvqnvUG8oK2KGzZf9
					kZo6VCnbm8hzghYNFQbSqF0jCrSC6xSP1wVb
					/if0IdyVHjE1PMtk9R16ozPVFkY= )
ns0.n4.tld.		518400	IN A	127.0.0.1
ns1.n4.tld.		518400	IN A	127.0.0.1
n2.tld.			518400	IN NS	ns0.n2.tld.
			518400	IN NS	ns1.n2.tld.
			86400	NSEC	n3.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					sPWyGt70zgZZESXjwNpE1dQf09saBUY53vPe
					mZeXOPFpdWQdy3sfuhfPAkSeL80fNzqBTmXW
					mMAB2YSJTMfnuCp4FlDb7hO2Q1PR7ggJOoV1
					dE8VoD7QCDZogG8yqz2KljIPgPdX+LeYyu9D
					3zujL2SO/frJnlG8iuPdsvIPssQ= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					FvQl8tnSFcPsTsjSoagsA7KstJltK+Z5DW75
					Oan4KmnzBdXSiiYiGK/aBlgQLOZ/FP30Wxif
					BvWBhcgn9JY3Mevndfdub746KG2w/sWfjJR/
					3eeFM/Se+uvVMugk4urtzfNi3Rc6oYCK/m47
					TUCLLqmf1kKTTYBNRPOddeA00a0= )
ns0.n5.tld.		518400	IN A	127.0.0.1
ns1.n5.tld.		518400	IN A	127.0.0.1
n3.tld.			518400	IN NS	ns0.n3.tld.
			518400	IN NS	ns1.n3.tld.
			86400	NSEC	n4.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					OmypXg7CT1p+26QJeI6Kkv3ylYtjFSPnmj4B
					oCRsN7zXgsZeqHzDOjwyU0QcJETC9SW8qH47
					k1H9hN+/91ne31CKVFdjMHCfgqi18PA98lgw
					OU89MsZb9zEYmog2PjwksHY6dqS893llOaLo
					ZwX6UrEH88gh+MZe1uTixSKHXMQ= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					WhZOZegNAugM8lM5lbBgiA47iv3PazLx2L4y
					xCiGYmk/a4BXV3dJxtDHZoREkUynPEoNTKL6
					AwtmITwqBk4ZzchBNZLsynQq0JAB/QUdKgIT
					8I3KMsRMCY+g5LkdmRf7Zn+DPXFv2FnKZtCM
					4Hix3EZX9F5LC12pxEWpAGASkw0= )
ns0.n6.tld.		518400	IN A	127.0.0.1
ns1.n6.tld.		518400	IN A	127.0.0.1
n4.tld.			518400	IN NS	ns0.n4.tld.
			518400	IN NS	ns1.n4.tld.
			86400	NSEC	n5.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					F2AmxnGNsI+xzw8j1IPE5zUkPRSWEv3+optY
					clEaPtXzd5R0SeAvcPuWjFApkEQDf+bMPA3f
					VdB+QubitaPy7cy6dViVqaQ1FTlp/ppWZWGs
					F0x35SXFFwb+yE+MZWrs0bJkVtSJ1g0k13Fu
					TuhlAA9sfHHnaZDGCP7uOE2E8ak= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					GEnElrZOW+8a8MSVdbtIwv+CAJ3cuHmC9PbA
					vyDjhOu+xqOR2shGrI5IleiTRVWRLaICrD7V
					dv6Za7YKrawkWU8Gq96vWlDAQVlw50xB49Ay
					RDdqm5cT+F499xNL27Cz03pv45twYtDRixE2
					4Olne4RWlvBRU1vRIxDHZtmShY8= )
ns0.n7.tld.		518400	IN A	127.0.0.1
ns1.n7.tld.		518400	IN A	127.0.0.1
n5.tld.			518400	IN NS	ns0.n5.tld.
			518400	IN NS	ns1.n5.tld.
			86400	NSEC	n6.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					HdquVW48VASotbN1ku7Ito2kLLtXs9G6Clpm
					I59VECakH/zpJ6M7bKAK6VXMLeU+aVol0PVQ
					oIoOTUCJ0k8YtY3YPcoV09nGdZIHKKv/5Qr4
					vs1kCzu514nQldGYRKONe1FsRDAKzU4O0tb6
					2zHJMDQnl7/XFKaNUis0CMHmNzo= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					FMC3NLbpl5PtZ1rF0aG0GKi8bXo/tk2tQPvG
					vt2n6W5XOp2bA9dDNvas2+9k0+rG48d4dnrz
					3CospdxlzVDuH7HABzp0RAvDarCa/M6A0jre
					h90thiD5oXyrTrSLJV6j9H51GmPAFTTjFOmg
					POja85lhAExNNXtwB8V2dqY293E= )
ns0.n8.tld.		518400	IN A	127.0.0.1
ns1.n8.tld.		518400	IN A	127.0.0.1
n6.tld.			518400	IN NS	ns0.n6.tld.
			518400	IN NS	ns1.n6.tld.
			86400	NSEC	n7.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					ACQQm3fihmm3oJC3eTMaYl8dwlCWFBKiaIsx
					qumYcT6W3ZGe6L5eV4SCsJpiAjInBQwXi7sw
					ILLp0/e/36Uj/Wh/AU03qYA5qBrwDix7k0iP
					sX9ovOlVb2EUgXdtMA+r+T9B3zXM+Rdss4e0
					s5O8/q67DxMAyjtbPljRCQ15Y5w= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					eTKjTFdKsGQ9jnTthME/1dC2vvvOD290B+S5
					aIdoNwN/gHZzk6ClM2fHGkfi22uXuh/fNFUx
					ZhNTulDuu+cewhqzy1BziuDzXCJP7boDxQRG
					EJlW2Eqcj+OnLVrjXBItBRc9NjDSH9QUPJKj
					HNG6H8nqFzae7/GB0qjrhLciRDs= )
ns0.n9.tld.		518400	IN A	127.0.0.1
ns1.n9.tld.		518400	IN A	127.0.0.1
n7.tld.			518400	IN NS	ns0.n7.tld.
			518400	IN NS	ns1.n7.tld.
			86400	NSEC	n8.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					cZA6sFqKjsSPsmX+/ZLkeTbOiMKXBZVqk21d
					bH0LVKVI/3sXoWN89XGKCPGFlHt+vHYbZMeY
					d1GwO7UCpzAYa60UFlWOwemf6ShNpOtV1dUZ
					zmg9/pNvHtzhkJHp3FWZ1ovsujeSgk+/EhiO
					W9FjRwDBhPXgkGM8oTwrRefwR44= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					KkCsCmic7AeRmZ3PZj7HCSLaSO8uQZANdG1I
					qQGzuzVb3VIwE+hOXK/xU0KCIrCXCHV6iAZO
					GQdtRZ7T/Ifja00vt+vl3F7jq5hAXHCHbnxt
					uyiOAjTkCHyBBZLjiYJ4h1DbuwgmuTRRODHK
					Uj93xb5rhl1mjeEYXH/LKKXaeiM= )
n8.tld.			518400	IN NS	ns0.n8.tld.
			518400	IN NS	ns1.n8.tld.
			86400	NSEC	n9.tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					r5zGeJjIMYJIpXA3iP8NIaVm+FTIdCgcwFtk
					JFeLICMdg47o+s5hYTbOg6WdDe3xt/YK9PCm
					BEyS79rSCAmiv73oN63Q3qtdJXOjLvWQvNb0
					9wophRtnr3z708g8ahsN8BKvL9uotfcAi7Vf
					KQgb2P9SF3Ub7PYwlhAp2EF7i/E= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					z8k/B61a6n/sKVfWpUYr4TQRIPb/0HNYohZO
					7IPSm03FcYg0vg4Z+tYJDk5frhWR91HAlGim
					QkzTey/ZhKvqPAts7jjOygqTIrLpyQPoFmym
					R6lpErMiPkm7j5gVIUCq/o9EfwOhGdkSKIIT
					CZQunhdGMGG9+uDGmcdPDweEdrc= )
n9.tld.			518400	IN NS	ns0.n9.tld.
			518400	IN NS	ns1.n9.tld.
			86400	NSEC	tld. NS RRSIG NSEC
			86400	RRSIG	NSEC 5 2 86400 20091010173259 (
					20090910173259 48162 tld.
					HckPcSw6ZT78PzUOksI3QDMcoqd5CkjoTzPf
					3XIH4+yr/RTmXIhXqeMsyHqPt1CTOsAj55MB
					9PH9NKnJehMlLPgZ3G6kMc98M3Atbrq+Fggq
					z/308PJc0Pakxs4y22jIUl2QGEjRYU52g5WI
					kqRYLUSLclggGgkE5hjReLsTSUc= )
			86400	RRSIG	NSEC 7 2 86400 20091010173259 (
					20090910173259 55238 tld.
					YQwSthd4fIG+L8xYMCuFnM7cuDqgNHhiZkHE
					75d3u4qMmgW0ym4eWcFRZ5JoXsTUa+XUae0h
					rBptie1WX3kmR+dfGdRETDa/gfNkWIqGwh/T
					XlEUTg0GMlYHkpivNZo/DqGKoX+RhD2IxgZS
					YLYAXluCbwYhZGI1J3g33UKs0x4= )

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

As with IPv6, the problem with the deployment of frictionless surfaces is
that they're not getting traction.



More information about the dns-operations mailing list